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REMARKS 

Reconsideration and allowance are respectfully requested. 

Editorial and U.S. patent practice changes have been made to the specification and 
abstract. Claims 1 1-22 are cancelled in favor of new claims 23-30. Entry is requested. 

All claims stand rejected under 35 U.S.C. §102 as allegedly being anticipated by 
Haverinen. This rejection is respectfully traversed. 

To establish that a claim is anticipated, the Examiner must point out where each and 
every limitation in the claim is found in a single prior art reference. Scripps Clinic & Research 
Found, v, Genentec, Inc., 927 F.2d 1565 (Fed. Cir. 1991). Every limitation contained in the 
claims must be present in the reference, and if even one limitation is missing from the reference, 
then it does not anticipate the claim. Kloster Speedsteel AB v. Crucible, Inc., 793 F.2d 1565 
(Fed. Cir, 1986). Haverinen fails to satisfy this rigorous standard. 

Haverinen describes authenticating a mobile node to a packet data network. A shared 
secret for both the mobile node and the packet data network is arranged by using a shared secret 
of the mobile node and a network authentication center. The mobile node sends its subscriber 
identity to the packet data network together with a "replay attack protector." The packet network 
obtains authentication triplets, forms a session key using them, and sends back to the mobile 
node challenges and a cryptographic authenticator made by using the session key. The mobile 
node then forms the rest of the authentication triplets using the challenges and then forms the 
session key. With the session key, the mobile node can check the validity of the cryptographic 
authenticator. If the authenticator is correct, the mobile node sends a cryptographic response 
formed using the session key to the packet data network for authenticating itself to the packet 
data network. 
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Claim 23 now recites " re-running an authentication and key agreement procedure 
defined for the radio communication network between a mobile node and an authentication 
server of the radio communication network," "providing a shared secret resulting from the re- 
running of the authentication and key agreement procedure to a stable forwarding agent of the 
mobile routing system," and "using the shared secret to authenticate the mobile node to the stable 
forwarding agent." Once the mobile node is authenticated to the stable forwarding agent, the 
stable forwarding agent "collects] subscriber contact information from the authentication 
server" and uses that "subscriber information to assign a Fully Qualified Domain Name (FQDN) 
and/or an IP address to the mobile node." As a result of the trust created between the 
authentication server and the stable forwarding agent, the stable forwarding agent can trust the 
subscriber contact information that it receives. One non-limiting example use might be that if 
the contact information identifies the subscriber's home domain as "sonera.net", the stable 
forwarding agent can ensure that a FQDN assigned to the mobile node includes that home 
domain "sonera.net" as the FQDN suffix. 

Haverinen does not disclose re-running an authentication and key agreement procedure to 
achieve this functionality. Nor does Haverinen teach assigning an FQDN and/or IP address to 
the mobile node by making use the subscriber contact information collected by the stable 
forwarding agent from the authentication server. Rather than making a static FQDN/IP address 
allocation within the stable forwarding agent, the claimed approach provides a simple but secure 
way to assign a suitable Fully Qualified Domain Name and/or IP address to the mobile node 
using subscriber contact information collected from the authentication server by "piggybacking" 
on the reused authentication process. 

Similar features are also missing from apparatus claim 30. 
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Lacking all the features from claims 23 and 30, the application is in condition for 
allowance. An early notice to that effect is requested. 
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